Fine tuning of network access permissions. Is it possible?

Yoskaldyr

I want to lock some application that can leak some personal data to VPN connection only and without ability to gather any information about real Wifi or mobile connection (mac addresses, etc.)

Is it possible? Because when application has full network access I can see in all permission list "view network connections" and "view Wi-Fi connection" permissions. How can I disable/revoke these permissions?

Dumdum

Yoskaldyr can see in all permission list "view network connections" and "view Wi-Fi connection" permissions

And how would apps use internet without these permissions? Unless I'm misunderstanding what these permissions are.

Vagabond8630

One potential workaround would be to create a dedicated system profile for these apps, install the VPN app, enable kill-switch to only allow system-wide network access for the system profile (Settings > Network & internet > VPN > your VPN settings > Always-on VPN: ON & Block connections without VPN: ON), connect to your VPN, then install and use those apps with network permissions.

Yoskaldyr

Vagabond8630 I know how to do this (as example work profile) but even in such situation application has information about wifi or mobile connection. Yes traffic doesn't leak, but information/metadata is available.

Is it possible to configure permissions that application can't see any information about real internet connection? Only VPN connection options.

Yoskaldyr

Dumdum Maybe I'm misunderstanding also. Where can I get information about what exactly application can get when full network access is enabled?